$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft File: ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft (raw, json) Hash identifier: E1Lmxs8F+wRXG5YV9LrSgYlRrrs1umc8tG2o2wD9uss= Subject key identifier: B9:0B:96:EF:66:21:46:AB:A2:B9:ED:17:19:30:6F:FB:3B:95:0F:F6 Authority key identifier: 6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE Certificate issuer: /CN=A91CE978/serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE Certificate serial: 3650 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft Manifest number: 35DD Signing time: Tue 22 Sep 2026 14:51:18 +0000 Manifest this update: Tue 22 Sep 2026 14:51:18 +0000 Manifest next update: Tue 29 Sep 2026 14:51:18 +0000 Files and hashes: 1: ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl (hash: gWHZY5svp5fF1mGtRBaFNOb69QeZirbTwa2Og2E/FR0=) 2: E6F73E22B99E11EEBF189021C4F9AE02.roa (hash: 8S+zuChDcqGL9ZeLsJ6JHvqala1ytBwLnGv387U8Cx0=) 3: D343067C86EC11F19E006003A7EE528E.roa (hash: MwabdDtsR88t/I1zQatof0zHAy5NQHDXaMUX2ZWtv1k=) 4: 64E2B628BE4911EE897F291BC4F9AE02.roa (hash: mK73bfSEN6zR8+iXpbDtVPOlbDMpY+j7LIX++cafcEE=) 5: D2392E7886EC11F19E006003A7EE528E.roa (hash: /EKK1bYish9YkpKFk7lZQQfQE2DHY5Z3eS0D3n247UA=) 6: D79607EEDCDD11EE85DBEB12C4F9AE02.roa (hash: 8+4nPBH0mKjruMVqsF1eFTkdvjJp7WM7Sk6y7pERmRQ=) 7: 29F7413CBB6011EEB59E5D81C4F9AE02.roa (hash: 5d46M17tPjCDpGTGqDqbIScbNZIYW2F1SqaVmxxIbOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13904 (0x3650) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE978, serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE Validity Not Before: Sep 22 14:51:18 2026 GMT Not After : Sep 29 14:51:18 2026 GMT Subject: CN=6ab295e6-861d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:06:83:15:ca:54:84:fa:09:0f:c0:32:87:d5: 85:3e:51:b7:b8:22:c4:90:e7:75:49:5b:63:10:56: 0f:19:a4:20:e9:2c:ee:ae:e8:0e:76:65:c2:ff:93: 23:48:6f:20:ba:17:84:15:ef:e7:5a:5a:2c:c2:f9: 33:e2:6f:4d:fd:14:97:1a:3b:2b:88:eb:21:73:d5: ad:f5:c3:f2:85:f8:bd:3c:37:ec:1f:c9:fa:f7:61: 17:65:c8:63:85:f8:03:f3:5c:70:52:74:79:5f:55: 5b:53:aa:94:eb:9d:a4:77:40:ce:2a:b9:4b:34:f2: 7f:56:8f:98:a1:f9:26:ff:66:99:2d:94:eb:ee:ee: ae:bf:c6:7c:f6:92:32:83:47:a3:cc:92:b3:e6:a6: 33:b0:7b:6e:90:5b:6a:f8:5f:fc:f2:af:b8:67:89: 78:0f:be:46:1c:e1:18:fe:0a:21:a8:4e:bd:94:06: c5:5e:e6:06:5b:b2:92:4a:21:70:98:10:87:e5:d5: 79:7b:d0:1c:79:73:c7:b3:96:4b:f6:fe:92:30:b9: 25:2c:24:0b:42:6d:55:ec:32:72:8b:d6:ea:7f:de: c6:98:91:66:49:72:41:ef:db:59:45:16:ec:38:3a: 04:87:1b:70:f3:8e:11:dd:84:4a:ab:fa:5a:81:6f: e2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0B:96:EF:66:21:46:AB:A2:B9:ED:17:19:30:6F:FB:3B:95:0F:F6 X509v3 Authority Key Identifier: keyid:6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:01:f2:7b:7a:4e:00:1f:d6:09:e2:e6:54:c8:8c:25:47:66: 0b:bf:97:ba:c2:2b:2c:d3:48:64:1e:be:5b:b0:97:cb:1a:d0: a8:23:d8:5c:aa:3c:2c:68:43:f9:56:83:b6:a0:5c:22:e2:37: 6f:4f:0f:cb:26:fe:93:25:dd:4c:18:3d:4b:c1:b5:0d:6c:2c: 21:cf:bb:21:78:f3:37:63:c3:32:5b:a8:91:c9:40:0c:cb:3a: 15:0b:22:b8:6c:a2:48:d5:0a:b2:98:b1:e6:68:73:cf:82:ec: 61:e5:fa:52:35:6f:68:03:12:78:76:b8:80:2e:fc:4f:dc:ce: 28:a1:95:8b:8d:fa:20:4e:23:58:55:6d:c3:1b:35:63:1d:4c: fc:de:9c:58:27:4f:63:64:a0:a1:84:81:eb:6b:28:0e:7d:e6: 89:e9:5c:82:c1:5f:7d:89:44:9e:79:dc:25:77:25:6d:98:9d: bb:10:93:df:8c:44:61:20:4c:bd:7c:23:0e:39:61:c1:66:f5: c6:58:bc:db:12:16:cc:d6:4c:fc:89:d7:52:46:90:70:41:b9: 16:66:12:49:b1:8a:89:f8:63:ff:33:0d:c6:fe:a4:96:79:36: 7c:e4:0b:29:75:db:58:21:87:5a:6a:98:76:0d:bd:d0:9e:80: 81:83:fa:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5NzgxMTAvBgNVBAUTKDZBMUU0RjcyODQ3RUIzNjk5NTIyQzkzRDI2NzczRjBE RjgzOTZFQkUwHhcNMjYwOTIyMTQ1MTE4WhcNMjYwOTI5MTQ1MTE4WjAYMRYwFAYD VQQDEw02YWIyOTVlNi04NjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkQaDFcpUhPoJD8Ayh9WFPlG3uCLEkOd1SVtjEFYPGaQg6SzurugOdmXC/5Mj SG8guheEFe/nWloswvkz4m9N/RSXGjsriOshc9Wt9cPyhfi9PDfsH8n692EXZchj hfgD81xwUnR5X1VbU6qU652kd0DOKrlLNPJ/Vo+Yofkm/2aZLZTr7u6uv8Z89pIy g0ejzJKz5qYzsHtukFtq+F/88q+4Z4l4D75GHOEY/gohqE69lAbFXuYGW7KSSiFw mBCH5dV5e9AceXPHs5ZL9v6SMLklLCQLQm1V7DJyi9bqf97GmJFmSXJB79tZRRbs ODoEhxtw844R3YRKq/pagW/inwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLkLlu9m IUarorntFxkwb/s7lQ/2MB8GA1UdIwQYMBaAFGoeT3KEfrNplSLJPSZ3Pw34OW6+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTk3OC8zMjIzRjM1RTFE OTgxMUUyOEE4QzJFODIwOEIwMkNEMi9haDVQY29SLXMybVZJc2s5Sm5jX0RmZzVi cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoNVBjb1ItczJtVklzazlKbmNfRGZnNWJyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTk3OC8zMjIzRjM1RTFEOTgxMUUyOEE4QzJFODIwOEIwMkNEMi9haDVQY29SLXMy bVZJc2s5Sm5jX0RmZzVicjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmwHye3pOAB/WCeLmVMiMJUdmC7+XusIrLNNIZB6+W7CXyxrQqCPYXKo8LGhD +VaDtqBcIuI3b08Pyyb+kyXdTBg9S8G1DWwsIc+7IXjzN2PDMluokclADMs6FQsi uGyiSNUKspix5mhzz4LsYeX6UjVvaAMSeHa4gC78T9zOKKGVi436IE4jWFVtwxs1 Yx1M/N6cWCdPY2SgoYSB62soDn3mielcgsFffYlEnnncJXclbZiduxCT34xEYSBM vXwjDjlhwWb1xli82xIWzNZM/InXUkaQcEG5FmYSSbGKifhj/zMNxv6klnk2fOQL KXXbWCGHWmqYdg290J6AgYP6VA== -----END CERTIFICATE-----Generated at Wed Sep 23 07:22:20 2026 by rpki-client